$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft File: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft (raw, json) Hash identifier: fyVqm4l2gcrQMVAv7op68Blc3PbgB83gJygR/EKxmzQ= Subject key identifier: DC:6C:98:4A:9E:C3:18:55:2E:BF:92:CE:3A:79:8A:FA:91:86:2E:D6 Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Certificate serial: 65670A73E6A98F43451D8B76EBC0732207C95FD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft Manifest number: 01E1 Signing time: Tue 24 Mar 2026 10:21:49 +0000 Manifest this update: Tue 24 Mar 2026 10:16:49 +0000 Manifest next update: Fri 27 Mar 2026 17:58:49 +0000 Files and hashes: 1: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl (hash: i+3/Edhupr3NJYN7qxSSySr1Dok5xKGKlhxyOkraN70=) 2: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: XpfKRKn/aePFL2Um700oqFvEnzDkELByApcE+JeDEyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:67:0a:73:e6:a9:8f:43:45:1d:8b:76:eb:c0:73:22:07:c9:5f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Validity Not Before: Mar 24 10:16:49 2026 GMT Not After : Mar 27 17:58:49 2026 GMT Subject: CN=DC6C984A9EC318552EBF92CE3A798AFA91862ED6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6a:c1:c4:a8:21:fb:74:78:da:90:2f:70:6b: 44:9e:51:6b:f9:73:7f:64:bc:f8:7f:76:e6:4d:8b: 95:5a:03:94:ee:22:75:d5:ce:97:3f:7f:95:fd:7c: 2d:09:e5:11:6b:5a:55:45:b7:ca:e8:85:6d:65:b5: 06:9b:ca:b2:49:6d:44:02:fc:09:8a:50:a1:ce:c7: 51:a1:5e:0a:2d:9f:08:b3:0e:c4:6c:3d:44:c5:32: c0:75:92:6a:17:7d:b6:0f:7f:6f:81:b8:ca:e0:7c: 90:fb:a5:6c:01:d2:42:9f:08:12:f6:17:e8:08:4a: 63:82:4f:5c:b0:66:f3:9e:32:15:30:2a:e6:b5:de: 98:0e:53:e6:c5:3e:db:2e:6f:74:d8:d9:f1:2f:57: 52:bf:10:e5:29:55:e7:40:00:19:90:9e:ff:dc:07: d0:6c:3e:19:20:90:df:1a:86:7f:b9:d9:26:2a:8a: 8f:45:4a:e5:f5:52:1c:4d:5a:51:79:cf:2c:9c:d9: f8:5c:4d:2c:5b:1f:bf:c1:bc:b6:9f:b1:09:43:35: 13:86:34:72:d6:34:ec:b5:dc:7e:ce:bb:1e:66:08: 87:b8:39:2f:64:38:21:26:c9:02:83:5e:00:b6:a7: 75:ae:88:8f:5b:77:87:18:c4:bc:57:94:19:94:c3: 54:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6C:98:4A:9E:C3:18:55:2E:BF:92:CE:3A:79:8A:FA:91:86:2E:D6 X509v3 Authority Key Identifier: keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:37:4e:ba:c0:cf:c6:5b:7e:bc:fe:71:2a:df:35:ac:46:03: a0:2a:de:f3:8e:11:ca:05:3c:87:55:cb:f6:76:93:41:b1:3d: f3:3c:86:ad:2b:de:68:31:b2:b8:b5:23:8d:5f:8e:08:3f:2a: 2a:9e:67:2a:86:41:22:7d:8e:d3:bd:03:f3:9f:57:58:dc:e1: f8:a9:42:f7:c4:b6:da:a1:a0:9a:c9:c5:ae:aa:26:b5:5c:98: 7d:9b:5b:1a:37:7b:e7:5f:56:5c:dd:af:48:74:e6:9a:e0:e0: 39:7a:4f:8f:85:bd:d7:15:96:bd:23:50:8e:7e:55:f0:78:d1: 89:bb:19:10:75:49:79:e9:cf:6c:c4:c9:99:0b:a8:10:97:87: 9c:e0:01:d9:60:15:0a:ab:f9:68:8c:99:25:98:5e:3f:46:a5: 4a:4d:a1:a3:13:ad:ee:90:ef:07:ef:68:68:36:5f:ef:b5:b8: 7f:70:e6:6a:21:5d:3e:58:95:75:46:2b:12:7c:0f:cf:67:4a: 87:2c:3e:0b:c6:00:13:3c:91:c4:e7:7c:74:5d:30:d5:f9:41: 16:d3:74:76:1e:42:5e:e4:2d:29:a5:27:25:89:52:91:97:23: 50:a9:68:67:18:9e:61:35:ef:d6:b3:13:d3:42:4f:ba:11:b8: 36:c8:ea:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWcKc+apj0NFHYt268BzIgfJX9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdB OEFDRjFGRjAeFw0yNjAzMjQxMDE2NDlaFw0yNjAzMjcxNzU4NDlaMDMxMTAvBgNV BAMTKERDNkM5ODRBOUVDMzE4NTUyRUJGOTJDRTNBNzk4QUZBOTE4NjJFRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOasHEqCH7dHjakC9wa0SeUWv5 c39kvPh/duZNi5VaA5TuInXVzpc/f5X9fC0J5RFrWlVFt8rohW1ltQabyrJJbUQC /AmKUKHOx1GhXgotnwizDsRsPUTFMsB1kmoXfbYPf2+BuMrgfJD7pWwB0kKfCBL2 F+gISmOCT1ywZvOeMhUwKua13pgOU+bFPtsub3TY2fEvV1K/EOUpVedAABmQnv/c B9BsPhkgkN8ahn+52SYqio9FSuX1UhxNWlF5zyyc2fhcTSxbH7/BvLafsQlDNROG NHLWNOy13H7Oux5mCIe4OS9kOCEmyQKDXgC2p3WuiI9bd4cYxLxXlBmUw1S/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3GyYSp7DGFUuv5LOOnmK+pGGLtYwHwYDVR0j BBgwFoAU3iPuVxgNYbOS3IiFn+ZUx6is8f8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWMxZTJmMy00ZmJkLTQ0YmItODNmMC1iYjVhZmU2NDU3NWUvMC9ERTIzRUU1NzE4 MEQ2MUIzOTJEQzg4ODU5RkU2NTRDN0E4QUNGMUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdBOEFD RjFGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0 QzdBOEFDRjFGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKM3TrrAz8Zbfrz+cSrfNaxGA6Aq3vOOEcoF PIdVy/Z2k0GxPfM8hq0r3mgxsri1I41fjgg/KiqeZyqGQSJ9jtO9A/OfV1jc4fip QvfEttqhoJrJxa6qJrVcmH2bWxo3e+dfVlzdr0h05prg4Dl6T4+FvdcVlr0jUI5+ VfB40Ym7GRB1SXnpz2zEyZkLqBCXh5zgAdlgFQqr+WiMmSWYXj9GpUpNoaMTre6Q 7wfvaGg2X++1uH9w5mohXT5YlXVGKxJ8D89nSocsPgvGABM8kcTnfHRdMNX5QRbT dHYeQl7kLSmlJyWJUpGXI1CpaGcYnmE179azE9NCT7oRuDbI6nQ= -----END CERTIFICATE-----Generated at Thu Mar 26 05:55:48 2026 by rpki-client